CNET.com

[Guest]

When I go to CNET.COM on my desktop computer the pictures come up with a Red
X, All other web site seem to work find. I copy the properties of the CNET
logo at the top left corner of the page and I get the following URL:
http://i.i.com.com/cnwk.1d/i/hd/hed_reviews_1.gif

I take that URL and put it in my browser it say "The page cannot be
displayed"

I tried another browser FireFox and it still won't display the pictures, but
it does say "the connection was refused when attempting to contact
i.i.com.com."

I have also tried this with my notebook computer sitting next to my desktop
and that receive the CNET.COM correctly.

Any Ideas?

Thanks for your help!
Mike

 

[PA Bear]

Windows version?

Start here: http://support.microsoft.com/?kbid=283807

 

[Guest]

I have already try kbid=283807 and I try all 10 Items, and it still doesn't
work. I thinking if I go the http://i.i.com.com I should get that page but I
get "The page cannot be displayed" If I can't get the page to display then I
won't be able to download the .gif files.

I'm I looking at this correctly?

Thanks for your help!

Mike

 

[PA Bear]

I'd then run a thorough check for hijackware, Mike.

Dealing with Trojans & Hijackware

A. Removing Trojans and Trojanware with Sysclean

Create a new folder named Sysclean (e.g., C:\Program files\Sysclean or just
a desktop folder). Download 'Sysclean.com' from
http://www.trendmicro.com/download/dcs.asp to this folder. Download the
latest 'Trend Pattern File' zip (e.g., lpt123.zip) from
http://www.trendmicro.com/download/pattern.asp and extract its contents to
the same folder; see the Readme text file for instructions.

Delete Temporary Internet Files (IE Tools>Internet Options>General)
accepting the option to delete all offline content. Reboot and delete
contents of TEMP folders and Recycle Bin.

Close all running programs including your anti-virus application, go
offline, and run Sysclean. For best results, do nothing with the machine
until the scan completes.

If the scan shows any infections in System Restore files:

(1) create a new Restore Point (Start>Programs>Accessories>System
Tools>System Restore), then

(2) delete all but the most recent Restore Point
(Start>Programs>Accessories>System Tools>Disk Cleanup>More options [tab]).

Afterwards, update your own anti-virus application and perform another full
system scan.

B. Hijackware

Help with Hijackware (all are MS MVP sites)
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/Darnit.htm
http://www.mvps.org/sramesh2k/Malware_Defence.htm

Run the following tools in this order with nothing else running in
background:

1. CWShredder v2.0 (no updates available currently; choose Fix, not Scan)

2. Ad-Aware SE (Reconfigure per http://aumha.org/forum/viewtopic.php?t=5877;
Fix all found)

3. Spybot (RTFM; Immunize first and then scan; Generally, fix everything in
red)

Important: You must seek updates for Ad-Aware, Spybot, etc., before each and
every use, even "right out of the box". But even they can't catch
everything, 24/7.

When all else fails, HijackThis
(http://forum.aumha.org/downloads/hijackthis.zip) is the preferred tool to
use. It will help you to both identify and remove any hijackware/spyware.
**Post your files to http://forums.spywareinfo.com/,
http://castlecops.com/forum67.html or
http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not here.**

[Alternate download pages for many of the above tools may be found at
http://aumha.org/a/parasite.htm.]

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957

 

[Robert Aldwinckle]

....

I thinking if I go the http://i.i.com.com I should get that page but I
get "The page cannot be displayed" If I can't get the page to display then I
won't be able to download the .gif files.

I'm I looking at this correctly?

I doubt it. That name is an alias for a caching server.
I don't think there would be any reason for it to have
a "default" page.

In fact, I just tried it. It returned "Invalid URL..."


You didn't answer PA Bear's question but I'll take a chance
that you have NTx. If not you won't have nslookup and
will have to check that your HOSTS file isn't causing any
interference in the lookups. Renaming it would avoid that
issue.


Does your DNS show you that alias?
Open up a command window and enter:

nslookup i.i.com.com

<nslookup output>
Non-authoritative answer:
Name: a868.g.akamai.net
Addresses: 132.246.2.7, 132.246.2.8
Aliases: i.i.com.com
</nslookup output>


Next, is something blocking that site?
Enter this command:

ping i.i.com.com -n 1

Believe it or not that worked for me. Amazing. I was expecting
to see ping (ICMP packet) blocked. But the main point of trying it
is to see if *your lookup* is bypassing the DNS and getting an
invalid address, either from your HOSTS file or from your dnscache,
which would be different from any of the addresses returned by
nslookup.

Thanks for your help!

Mike

HTH

Robert Aldwinckle
---

 

[Guest]

Thanks PA Bear & Robert for you help!

I'm using Windows XP and ZoneAlarm Pro Also Ad-Aware and Spy Sweeper which I
have scanned my system twice using all programs listed above.

I have also used Sysclean and CWShredder and they found nothing.

When I go to http://i.i.com.com/cnwk.1d/i/hd/hed_reviews_1.gif with my
Notebook it will display the CNET.com logo. When I go to the same address
with my Desktop I get "The page cannot be displayed"

When I go to http://i.i.com.com I get "Invalid URL" on both computer.

I did try nslookup i.i.com.com

Non-authoritative answer:
Name: a868.g.akamai.net
Addresses: 63.209.144.168, 64.156.220.104
Aliases: i.i.com.com

I also tried ping i.i.com.com -n 1

Pinging i.i.com.com [127.0.0.1] with 32 bytes of data:
reply from 127.0.0.2: bytes=32 time<1ms ttl=128
ping statistics for 127.0.0.1 :

Packets: sent =1, Received =1, Lost =0

Most web site I go to works correctly but CNET.com come up with red X were
the pictures should be.

On my notebook CNET.com work correctly.

Thank for your help PA Bear & Robert, I can really use it.

What should I try next?

Mike

 

[Robert Aldwinckle]

the main point of trying it is to see if *your lookup* is bypassing

Pinging i.i.com.com [127.0.0.1] with 32 bytes of data:

<VBSEG>


---

Thanks PA Bear & Robert for you help!

I'm using Windows XP and ZoneAlarm Pro Also Ad-Aware and Spy Sweeper which I
have scanned my system twice using all programs listed above.

I have also used Sysclean and CWShredder and they found nothing.

When I go to http://i.i.com.com/cnwk.1d/i/hd/hed_reviews_1.gif with my
Notebook it will display the CNET.com logo. When I go to the same address
with my Desktop I get "The page cannot be displayed"

When I go to http://i.i.com.com I get "Invalid URL" on both computer.

I did try nslookup i.i.com.com

Non-authoritative answer:
Name: a868.g.akamai.net
Addresses: 63.209.144.168, 64.156.220.104
Aliases: i.i.com.com

I also tried ping i.i.com.com -n 1

Pinging i.i.com.com [127.0.0.1] with 32 bytes of data:
reply from 127.0.0.2: bytes=32 time<1ms ttl=128
ping statistics for 127.0.0.1 :

Packets: sent =1, Received =1, Lost =0

Most web site I go to works correctly but CNET.com come up with red X were
the pictures should be.

On my notebook CNET.com work correctly.

Thank for your help PA Bear & Robert, I can really use it.

What should I try next?

Mike

....

I doubt it. That name is an alias for a caching server.
I don't think there would be any reason for it to have
a "default" page.

In fact, I just tried it. It returned "Invalid URL..."


You didn't answer PA Bear's question but I'll take a chance
that you have NTx. If not you won't have nslookup and
will have to check that your HOSTS file isn't causing any
interference in the lookups. Renaming it would avoid that
issue.


Does your DNS show you that alias?
Open up a command window and enter:

nslookup i.i.com.com

<nslookup output>
Non-authoritative answer:
Name: a868.g.akamai.net
Addresses: 132.246.2.7, 132.246.2.8
Aliases: i.i.com.com
</nslookup output>


Next, is something blocking that site?
Enter this command:

ping i.i.com.com -n 1

Believe it or not that worked for me. Amazing. I was expecting
to see ping (ICMP packet) blocked. But the main point of trying it
is to see if *your lookup* is bypassing the DNS and getting an
invalid address, either from your HOSTS file or from your dnscache,
which would be different from any of the addresses returned by
nslookup.




HTH

Robert Aldwinckle

 

[Frank Saunders, MS-MVP IE/OE]

Thanks PA Bear & Robert for you help!

I'm using Windows XP and ZoneAlarm Pro Also Ad-Aware and Spy Sweeper
which I have scanned my system twice using all programs listed above.

I have also used Sysclean and CWShredder and they found nothing.

When I go to http://i.i.com.com/cnwk.1d/i/hd/hed_reviews_1.gif with my
Notebook it will display the CNET.com logo. When I go to the same
address with my Desktop I get "The page cannot be displayed"

When I go to http://i.i.com.com I get "Invalid URL" on both computer.

I did try nslookup i.i.com.com

Non-authoritative answer:
Name: a868.g.akamai.net
Addresses: 63.209.144.168, 64.156.220.104
Aliases: i.i.com.com

I also tried ping i.i.com.com -n 1

Pinging i.i.com.com [127.0.0.1] with 32 bytes of data:
reply from 127.0.0.2: bytes=32 time<1ms ttl=128
ping statistics for 127.0.0.1 :

Packets: sent =1, Received =1, Lost =0

Most web site I go to works correctly but CNET.com come up with red X
were the pictures should be.

On my notebook CNET.com work correctly.

Thank for your help PA Bear & Robert, I can really use it.

What should I try next?

Mike

Check for a file named HOSTS with no extension (not Hosts.sam). It may be a
hidden file. Open it with Notepad and remove any line referencing the site.
Or, rename HOSTS to OLDHOSTS

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup only. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com./athome/security/protect/default.aspx

 

[Guest]

Thanks Robert & Frank,

The problem was staring me right in the face. 127.0.0.1, Once you pointed
this out I went to my host file and found the web site i.i.com.com listed
there. I put a # sign in front of the web site and now everything works fine.

Awhile back, I found a web site that said if you down load a list of sites
that were know for spyware and put them in your host file this would help to
prevent spyware from getting into your computer. I did this a couple a years
ago and forgot all about it until you pointed out 127.0.0.1 when I try to
ping i.i.com.com. Why would CNET.com start using i.i.com.com now I have no
idea?

Thanks you for all your help, it nice to see people helping people.

Mike

Thanks PA Bear & Robert for you help!

I'm using Windows XP and ZoneAlarm Pro Also Ad-Aware and Spy Sweeper
which I have scanned my system twice using all programs listed above.

I have also used Sysclean and CWShredder and they found nothing.

When I go to http://i.i.com.com/cnwk.1d/i/hd/hed_reviews_1.gif with my
Notebook it will display the CNET.com logo. When I go to the same
address with my Desktop I get "The page cannot be displayed"

When I go to http://i.i.com.com I get "Invalid URL" on both computer.

I did try nslookup i.i.com.com

Non-authoritative answer:
Name: a868.g.akamai.net
Addresses: 63.209.144.168, 64.156.220.104
Aliases: i.i.com.com

I also tried ping i.i.com.com -n 1

Pinging i.i.com.com [127.0.0.1] with 32 bytes of data:
reply from 127.0.0.2: bytes=32 time<1ms ttl=128
ping statistics for 127.0.0.1 :

Packets: sent =1, Received =1, Lost =0

Most web site I go to works correctly but CNET.com come up with red X
were the pictures should be.

On my notebook CNET.com work correctly.

Thank for your help PA Bear & Robert, I can really use it.

What should I try next?

Mike

Check for a file named HOSTS with no extension (not Hosts.sam). It may be a
hidden file. Open it with Notepad and remove any line referencing the site.
Or, rename HOSTS to OLDHOSTS

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup only. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com./athome/security/protect/default.aspx

 

[Tom Pepper Willett]

Mike: This is a host file I use..it's repeatedly updated, and provided by a
MVP:

http://www.mvps.org/winhelp2002/hosts.htm

Tom Pepper Willett
Microsoft MVP - FrontPage
| Thanks Robert & Frank,
|
| The problem was staring me right in the face. 127.0.0.1, Once you pointed
| this out I went to my host file and found the web site i.i.com.com listed
| there. I put a # sign in front of the web site and now everything works
fine.
|
| Awhile back, I found a web site that said if you down load a list of sites
| that were know for spyware and put them in your host file this would help
to
| prevent spyware from getting into your computer. I did this a couple a
years
| ago and forgot all about it until you pointed out 127.0.0.1 when I try to
| ping i.i.com.com. Why would CNET.com start using i.i.com.com now I have
no
| idea?
|
| Thanks you for all your help, it nice to see people helping people.
|
| Mike
|
|
| "Frank Saunders, MS-MVP IE/OE" wrote:
|
| > | > > Thanks PA Bear & Robert for you help!
| > >
| > > I'm using Windows XP and ZoneAlarm Pro Also Ad-Aware and Spy Sweeper
| > > which I have scanned my system twice using all programs listed above.
| > >
| > > I have also used Sysclean and CWShredder and they found nothing.
| > >
| > > When I go to http://i.i.com.com/cnwk.1d/i/hd/hed_reviews_1.gif with my
| > > Notebook it will display the CNET.com logo. When I go to the same
| > > address with my Desktop I get "The page cannot be displayed"
| > >
| > > When I go to http://i.i.com.com I get "Invalid URL" on both computer.
| > >
| > > I did try nslookup i.i.com.com
| > >
| > > Non-authoritative answer:
| > > Name: a868.g.akamai.net
| > > Addresses: 63.209.144.168, 64.156.220.104
| > > Aliases: i.i.com.com
| > >
| > > I also tried ping i.i.com.com -n 1
| > >
| > > Pinging i.i.com.com [127.0.0.1] with 32 bytes of data:
| > > reply from 127.0.0.2: bytes=32 time<1ms ttl=128
| > > ping statistics for 127.0.0.1 :
| > >
| > > Packets: sent =1, Received =1, Lost =0
| > >
| > > Most web site I go to works correctly but CNET.com come up with red X
| > > were the pictures should be.
| > >
| > > On my notebook CNET.com work correctly.
| > >
| > > Thank for your help PA Bear & Robert, I can really use it.
| > >
| > > What should I try next?
| > >
| > > Mike
| >
| > Check for a file named HOSTS with no extension (not Hosts.sam). It may
be a
| > hidden file. Open it with Notepad and remove any line referencing the
site.
| > Or, rename HOSTS to OLDHOSTS
| >
| > --
| > Frank Saunders, MS-MVP, IE/OE
| > Please respond in Newsgroup only. Do not send email
| > http://www.fjsmjs.com
| > Protect your PC
| > http://www.microsoft.com./athome/security/protect/default.aspx
| >
| >
| >

 

[Frank Saunders, MS-MVP IE/OE]

Thanks Robert & Frank,

The problem was staring me right in the face. 127.0.0.1, Once you
pointed this out I went to my host file and found the web site
i.i.com.com listed there. I put a # sign in front of the web site and
now everything works fine.

Awhile back, I found a web site that said if you down load a list of
sites that were know for spyware and put them in your host file this
would help to prevent spyware from getting into your computer. I did
this a couple a years ago and forgot all about it until you pointed
out 127.0.0.1 when I try to ping i.i.com.com. Why would CNET.com
start using i.i.com.com now I have no idea?

Thanks you for all your help, it nice to see people helping people.

Mike

You're welcome.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup only. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com./athome/security/protect/default.aspx

 

[Guest]

Thanks Tom, I will download this host file.

Again, Thanks everyone for your help!
Mike

Mike: This is a host file I use..it's repeatedly updated, and provided by a
MVP:

http://www.mvps.org/winhelp2002/hosts.htm

Tom Pepper Willett
Microsoft MVP - FrontPage
| Thanks Robert & Frank,
|
| The problem was staring me right in the face. 127.0.0.1, Once you pointed
| this out I went to my host file and found the web site i.i.com.com listed
| there. I put a # sign in front of the web site and now everything works
fine.
|
| Awhile back, I found a web site that said if you down load a list of sites
| that were know for spyware and put them in your host file this would help
to
| prevent spyware from getting into your computer. I did this a couple a
years
| ago and forgot all about it until you pointed out 127.0.0.1 when I try to
| ping i.i.com.com. Why would CNET.com start using i.i.com.com now I have
no
| idea?
|
| Thanks you for all your help, it nice to see people helping people.
|
| Mike
|
|
| "Frank Saunders, MS-MVP IE/OE" wrote:
|
| > | > > Thanks PA Bear & Robert for you help!
| > >
| > > I'm using Windows XP and ZoneAlarm Pro Also Ad-Aware and Spy Sweeper
| > > which I have scanned my system twice using all programs listed above.
| > >
| > > I have also used Sysclean and CWShredder and they found nothing.
| > >
| > > When I go to http://i.i.com.com/cnwk.1d/i/hd/hed_reviews_1.gif with my
| > > Notebook it will display the CNET.com logo. When I go to the same
| > > address with my Desktop I get "The page cannot be displayed"
| > >
| > > When I go to http://i.i.com.com I get "Invalid URL" on both computer.
| > >
| > > I did try nslookup i.i.com.com
| > >
| > > Non-authoritative answer:
| > > Name: a868.g.akamai.net
| > > Addresses: 63.209.144.168, 64.156.220.104
| > > Aliases: i.i.com.com
| > >
| > > I also tried ping i.i.com.com -n 1
| > >
| > > Pinging i.i.com.com [127.0.0.1] with 32 bytes of data:
| > > reply from 127.0.0.2: bytes=32 time<1ms ttl=128
| > > ping statistics for 127.0.0.1 :
| > >
| > > Packets: sent =1, Received =1, Lost =0
| > >
| > > Most web site I go to works correctly but CNET.com come up with red X
| > > were the pictures should be.
| > >
| > > On my notebook CNET.com work correctly.
| > >
| > > Thank for your help PA Bear & Robert, I can really use it.
| > >
| > > What should I try next?
| > >
| > > Mike
| >
| > Check for a file named HOSTS with no extension (not Hosts.sam). It may
be a
| > hidden file. Open it with Notepad and remove any line referencing the
site.
| > Or, rename HOSTS to OLDHOSTS
| >
| > --
| > Frank Saunders, MS-MVP, IE/OE
| > Please respond in Newsgroup only. Do not send email
| > http://www.fjsmjs.com
| > Protect your PC
| > http://www.microsoft.com./athome/security/protect/default.aspx
| >
| >
| >

 

[Guest]

I had the same thing where CNET, my yahoo, and pogo.com images had X on them.
I updated the host file from website discussed in prior posts. I also
downloaded another program called : lockhost.bat... from this link:
http://www.mvps.org/winhelp2002/hosts.htm

however, it either allows ALL ADS at ALL websites or Disallows ALL. There
are no settings to allow pictures on certain websites. Can a person edit the
"appropriate" host file to allow the images to open on that site? and how
would it look? for example, at Cnet or download.com, would the hostfile have
a # in front of the approprite website? Thanks for your help!!! These
forums are awesome!
..
..